Vulnerabilities

TI-2017-13166 CVE-2017-17941 · GHSA-fjgh-m43j-xwpc

PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.

LOW 33

PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.00937 Published 2017-12-28 No fix listed CWE-89

TI-2017-13165 CVE-2017-17940 · GHSA-6cmp-vqhj-484p

LOW 23

PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00492 Published 2017-12-28 No fix listed CWE-79

TI-2017-13164 CVE-2017-17939 · GHSA-7rj9-5523-cf4g

LOW 38

PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00456 Published 2017-12-28 No fix listed CWE-352

TI-2017-13163 CVE-2017-17938 · GHSA-v53x-4vjx-3w58

LOW 23

PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00492 Published 2017-12-28 No fix listed CWE-79

TI-2017-12905 CVE-2017-17634 · GHSA-q2hx-r25g-rc9x

MEDIUM 46

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02204 Published 2017-12-13 No fix listed CWE-89